View Single Post

  #2 (permalink)  
Old 09-02-2007, 05:38 PM
JenniP JenniP is offline
Junior Member
 
Join Date: Sep 2007
Posts: 4
JenniP is on a distinguished road
If you want to check if the page you are on is secure you can use

Request.ServerVariables("HTTPS") this will return "off" if its an HTTP page and "on" if its an https page.

So if your pointing at an HTTP page you then need to use a redirect to point to the HTTPS version of the page.

Because you are changing protocol you have to use a response.redirect rather than a server.transfer. This will also allow the web browser to check the SSL certificate.

So some code that will do this is below

if Request.ServerVariables("HTTPS") = "off" then
srvname = Request.ServerVariables("SERVER_NAME")
scrname = Request.ServerVariables("SCRIPT_NAME")
response.redirect("https://" & srvname & scrname)
end if

This will have a downside of losing any HTTP get/post data but will jump you to a secure session.

Jen
Reply With Quote